Skip to content

Program Upload

Technique · ATTACK:ics:T0845

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:ics:T0845",
  "title": "Program Upload",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T0845",
  "snapshot": "ics-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--3067b85e-271e-4bc5-81ad-ab1a81d411e3",
  "external_id": "T0845",
  "domain": "ics",
  "created": "2020-05-21T17:43:26.506Z",
  "modified": "2026-10-13T17:48:43.645Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [
    "collection"
  ],
  "source_references": [

  ]
}

Explicit source assertions (11)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:ics:M0813 → mitigates → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--06c663f8-fcf1-47eb-ab79-284e93eafa6b

ATTACK:ics:M0802 → mitigates → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0df0cb6d-0067-48b2-a33e-495415713ab7

ATTACK:ics:M0800 → mitigates → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5ae1cf3a-2603-4bf9-ace3-5b1ee5d8d757

ATTACK:ics:M0801 → mitigates → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5ca1d677-b41f-4f1e-b86b-f5637a418829

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--671043a9-337f-411a-9ca9-3112e897ab09

Department of Homeland Security September 2016

ATTACK:ics:S1009 → uses → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a946c9b1-5b89-44c9-b617-3412ffda34b9

ATTACK:ics:G1027 → uses → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--acc06595-994a-469b-972e-c71ab3298dde

ATTACK:ics:S1045 → uses → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b346eec8-de90-407c-b665-387086bb4553

Wylie-22 · Brubaker-Incontroller

ATTACK:ics:M0937 → mitigates → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--baf4bd30-4213-43c3-b70c-54418e734caf

ATTACK:ics:M0807 → mitigates → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c0efb24a-2329-401a-bba6-817f2867bb3f

Department of Homeland Security September 2016

ATTACK:ics:M0804 → mitigates → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f45c2df8-30e7-45d0-8067-7b2870767574

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.